@formbird/angular-elements (>=6.5.59, <=6.5.67), @griddo/ax (>=11.4.15, <=12.9.0-rc.0) +17 more potentially affected by CVE-2024-51434 via froala-editor (>=4.0.0, <=4.2.2)

froala-editor NPM version =4.0.0, =6.5.59, =11.4.15, =26.2.3, =26.2.3, =14.0.0-109224, =14.0.0-109224, =2.0.2, =1.6.4, =4.0.0, =4.0.0, =4.0.0, =4.2.2 - aurelia2-froala-editor 1.0.0 - froalaadmin 4.0.7 and more Source cves: CVE-2024-51434 Source advisory: OSV:GHSA-549P-5C7F-C5P4...

CVE-2024-51434

creationtimestamp| type| source ---|---|--- 2024-11-07 21:32:34+00:00| seen| https://infosec.exchange/users/cve/statuses/113443809109465362 2024-11-07 23:37:53+00:00| seen| https://t.me/cvedetector/10137...

CVE-2024-51434

The Froala WYSIWYG editor (version 4.3.0 and earlier ) is vulnerable to Cross-Site Scripting (XSS) due to inconsistent parsing of the tag. This flaw allows attackers to execute malicious scripts in the context of the editor. Impacted components include the froala-editor (NPM) package (versions *...